how to block bad request?

2023-01-03 Thread Jason Wee
Hi, Happy new year everyone. Background of my production setup. Using tomcat 10 and in linux environment, using the following accesslog valve %a %{X-Forwarded-For}i %h %l %u %t '%r' %s %b '%{Referer}i' '%{User-Agent}i' %D %S api.access_log.2022-12-20.txt:94.102.61.23 - 94.102.61.23 - -

Re: Jakarta for Beginners

2023-01-03 Thread hantsy bai
Follow the official starter guide to create a Jakarta EE project, and if you are new to Jakarta EE 10, check the FirstCup tutorial, and read the Jakarta EE tutorial for all specifications. https://start.jakarta.ee/ All related tutorials links can be found in the above link. --- Regards,

[SECURITY] CVE-2022-45143 Apache Tomcat - JsonErrorReportValve injection

2023-01-03 Thread Mark Thomas
CVE-2022-45143 Apache Tomcat - JsonErrorReportValve injection Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.1.0-M1 to 10.1.1 Apache Tomcat 9.0.40 to 9.0.68 Apache Tomcat 8.5.83 Description: The JsonErrorReportValve did not escape the type, message or

Re: Invalid Keystore format error on Tomcat

2023-01-03 Thread Christopher Schultz
Veni, On 1/2/23 12:20, Janardhanan, Veni wrote: Chris, This is the output I have (removed all identifying information : C:\Windows\system32>"C:\Program Files\RedHat\java-11-openjdk-11.0.13-1\bin\keytool" -v -list -keystore C:\SSL\certnew_pfx.pfx -storetype PKCS12 Enter keystore password:

Re: Query

2023-01-03 Thread Christopher Schultz
Devatha, On 12/31/22 14:13, Devatha Naga Puneeth wrote: How to disable the appending of trailing slash when client requests for the application root context ? I'm curious, why is this a problem for you? Apache Tomcat Version : 9.0.65 I have a sample folder in the webapps. When I access

Re: Jakarta for Beginners

2023-01-03 Thread Christopher Schultz
Amn, On 12/30/22 20:39, Amn Ojee Uw wrote: Before going any further, I have never program a Enterprise Web Page. I know a little of  HTML and enough of Java and JavaScript and C++ to find my way around, but I am not expert either. Having said that, I would like to get my toes wet in the